gaim vulnerabilities and fixes

Recent CVEs affecting gaim, with upgrade or downgrade steps. 28 tracked.

gaim has 28 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2005-08-16. Highest priority: CVE-2005-2103 (score 69/100).

• CVE-2005-2370 MEDIUM 5.0 DOWNGRADE UPGRADE Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other pack
• CVE-2005-2103 CRITICAL 9.8 UPGRADE Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of se
• CVE-2005-2102 MEDIUM 5.0 DOWNGRADE The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application cras
• CVE-2005-1934 MEDIUM 5.0 UPGRADE Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message tha
• CVE-2005-1269 MEDIUM 5.0 DOWNGRADE Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! messag
• CVE-2005-1262 MEDIUM 5.0 DOWNGRADE Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malforme
• CVE-2005-1261 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execut
• CVE-2005-0967 MEDIUM 5.0 DOWNGRADE Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file trans
• CVE-2005-0966 MEDIUM 6.4 DOWNGRADE The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject ar
• CVE-2005-0965 MEDIUM 5.0 DOWNGRADE The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to c
• CVE-2005-0573 MEDIUM 5.0 DOWNGRADE Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file t
• CVE-2005-0473 MEDIUM 5.0 DOWNGRADE MITIGATE The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (applicati
• CVE-2005-0472 MEDIUM 5.0 DOWNGRADE MITIGATE Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC pack
• CVE-2005-0208 MEDIUM 5.0 DOWNGRADE The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (applicati
• CVE-2004-2589 MEDIUM 5.0 DOWNGRADE Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Conten
• CVE-2004-0891 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial o
• CVE-2004-0785 HIGH 7.5 DOWNGRADE Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly
• CVE-2004-0784 HIGH 7.5 DOWNGRADE The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via s
• CVE-2004-0754 HIGH 7.5 DOWNGRADE Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute
• CVE-2004-0500 HIGH 7.5 DOWNGRADE MITIGATE Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote atta
• CVE-2004-0008 HIGH 7.5 UPGRADE UPGRADE Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a d
• CVE-2004-0007 HIGH 7.5 UPGRADE UPGRADE Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and
• CVE-2004-0006 HIGH 7.5 UPGRADE UPGRADE Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to c
• CVE-2004-0005 CRITICAL 9.8 DOWNGRADE Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execut
• CVE-2002-0989 HIGH 7.5 DOWNGRADE The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitra
• CVE-2002-0384 HIGH 7.5 DOWNGRADE Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary cod
• CVE-2002-0377 LOW 2.1 DOWNGRADE Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which
• CVE-2000-1172 HIGH 10.0 DOWNGRADE Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denia

FAQ

How do I fix gaim vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gaim being exploited right now?

None of the tracked gaim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gaim CVE should I patch first?

CVE-2005-2103 currently ranks highest (69/100): Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of se.

RSS feed for gaim · ← Back to latest CVEs